{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:2JRJ34MMC57DMRXOAVQGOUL65W","short_pith_number":"pith:2JRJ34MM","canonical_record":{"source":{"id":"2608.13450","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-13T16:33:44Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8ad611de0821cee6c27ab01f146773600a04ecee64447dc667383d637934570d","abstract_canon_sha256":"88ae0b4b27f11b53357052e5fd59e75e0266653711748e4e921dcd178d859796"},"schema_version":"1.0"},"canonical_sha256":"d2629df18c177e3646ee056067517eed851c28c6c58220285486365a2676cec2","source":{"kind":"arxiv","id":"2608.13450","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.13450","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"arxiv_version","alias_value":"2608.13450v1","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.13450","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_12","alias_value":"2JRJ34MMC57D","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_16","alias_value":"2JRJ34MMC57DMRXO","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_8","alias_value":"2JRJ34MM","created_at":"2026-08-14T01:04:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:2JRJ34MMC57DMRXOAVQGOUL65W","target":"record","payload":{"canonical_record":{"source":{"id":"2608.13450","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-13T16:33:44Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8ad611de0821cee6c27ab01f146773600a04ecee64447dc667383d637934570d","abstract_canon_sha256":"88ae0b4b27f11b53357052e5fd59e75e0266653711748e4e921dcd178d859796"},"schema_version":"1.0"},"canonical_sha256":"d2629df18c177e3646ee056067517eed851c28c6c58220285486365a2676cec2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-14T01:04:28.142280Z","signature_b64":"+au235ftxC0R7+7Y0fkY43DxHEGLS8oz5SzkIfswguMoMQx2mk4TV3h6wvIMNTx0Brwr14A2LpX4MjVshP/lDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2629df18c177e3646ee056067517eed851c28c6c58220285486365a2676cec2","last_reissued_at":"2026-08-14T01:04:28.140770Z","signature_status":"signed_v1","first_computed_at":"2026-08-14T01:04:28.140770Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.13450","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T01:04:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R0QGo84OOltFc+HgIQbS8XWwR/b0ou92/3HZDiCrDmrLlUSryYbDZU6ChOC5yDvjsBeycYDuSe6VEm7dsKfmBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T17:39:20.064151Z"},"content_sha256":"2b886576faa161493c8bc580b00460dec7710ddb341cd26d468cee5c53d0ecd7","schema_version":"1.0","event_id":"sha256:2b886576faa161493c8bc580b00460dec7710ddb341cd26d468cee5c53d0ecd7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:2JRJ34MMC57DMRXOAVQGOUL65W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Vehicles","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.SE","authors_text":"Md Rayhanur Rahman, Md Wasiul Haque, Mizanur Rahman, Sagar Dasgupta","submitted_at":"2026-08-13T16:33:44Z","abstract_excerpt":"Autonomous vehicles depend on large safety-critical software stacks, where weaknesses reachable from adversarial inputs may affect steering, braking, or other control decisions. Static analysis can identify candidate sites, but dynamically confirming exploitability requires executable test artifacts that are difficult to construct manually. We investigate whether large language models (LLMs) can automate this process for Autoware, an open-source autonomous-driving stack. We perform compiler-precise static analysis across 185 packages, identifying 1,375 decision rules, 2,274 validation checks, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.13450","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.13450/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-14T01:04:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LgsKuvPqL3U+0b2jJundod60kJHDEp/YZM+GiwxEzxMEN3oiHn9f9ysMNEc2cAA8uwCb/iw1J28ucvNJGH4SBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T17:39:20.064728Z"},"content_sha256":"7271f0f8999441419355eea55cd15aac1f355e42705ea098e80fde7b682e24df","schema_version":"1.0","event_id":"sha256:7271f0f8999441419355eea55cd15aac1f355e42705ea098e80fde7b682e24df"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2JRJ34MMC57DMRXOAVQGOUL65W/bundle.json","state_url":"https://pith.science/pith/2JRJ34MMC57DMRXOAVQGOUL65W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2JRJ34MMC57DMRXOAVQGOUL65W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T17:39:20Z","links":{"resolver":"https://pith.science/pith/2JRJ34MMC57DMRXOAVQGOUL65W","bundle":"https://pith.science/pith/2JRJ34MMC57DMRXOAVQGOUL65W/bundle.json","state":"https://pith.science/pith/2JRJ34MMC57DMRXOAVQGOUL65W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2JRJ34MMC57DMRXOAVQGOUL65W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:2JRJ34MMC57DMRXOAVQGOUL65W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"88ae0b4b27f11b53357052e5fd59e75e0266653711748e4e921dcd178d859796","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-13T16:33:44Z","title_canon_sha256":"8ad611de0821cee6c27ab01f146773600a04ecee64447dc667383d637934570d"},"schema_version":"1.0","source":{"id":"2608.13450","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.13450","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"arxiv_version","alias_value":"2608.13450v1","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.13450","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_12","alias_value":"2JRJ34MMC57D","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_16","alias_value":"2JRJ34MMC57DMRXO","created_at":"2026-08-14T01:04:28Z"},{"alias_kind":"pith_short_8","alias_value":"2JRJ34MM","created_at":"2026-08-14T01:04:28Z"}],"graph_snapshots":[{"event_id":"sha256:7271f0f8999441419355eea55cd15aac1f355e42705ea098e80fde7b682e24df","target":"graph","created_at":"2026-08-14T01:04:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.13450/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Autonomous vehicles depend on large safety-critical software stacks, where weaknesses reachable from adversarial inputs may affect steering, braking, or other control decisions. Static analysis can identify candidate sites, but dynamically confirming exploitability requires executable test artifacts that are difficult to construct manually. We investigate whether large language models (LLMs) can automate this process for Autoware, an open-source autonomous-driving stack. We perform compiler-precise static analysis across 185 packages, identifying 1,375 decision rules, 2,274 validation checks, ","authors_text":"Md Rayhanur Rahman, Md Wasiul Haque, Mizanur Rahman, Sagar Dasgupta","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-13T16:33:44Z","title":"LLM-Assisted Dynamic Threat Analysis for Attacker-Reachable Software Weaknesses in Autonomous Vehicles"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.13450","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2b886576faa161493c8bc580b00460dec7710ddb341cd26d468cee5c53d0ecd7","target":"record","created_at":"2026-08-14T01:04:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"88ae0b4b27f11b53357052e5fd59e75e0266653711748e4e921dcd178d859796","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2026-08-13T16:33:44Z","title_canon_sha256":"8ad611de0821cee6c27ab01f146773600a04ecee64447dc667383d637934570d"},"schema_version":"1.0","source":{"id":"2608.13450","kind":"arxiv","version":1}},"canonical_sha256":"d2629df18c177e3646ee056067517eed851c28c6c58220285486365a2676cec2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2629df18c177e3646ee056067517eed851c28c6c58220285486365a2676cec2","first_computed_at":"2026-08-14T01:04:28.140770Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-14T01:04:28.140770Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+au235ftxC0R7+7Y0fkY43DxHEGLS8oz5SzkIfswguMoMQx2mk4TV3h6wvIMNTx0Brwr14A2LpX4MjVshP/lDQ==","signature_status":"signed_v1","signed_at":"2026-08-14T01:04:28.142280Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.13450","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2b886576faa161493c8bc580b00460dec7710ddb341cd26d468cee5c53d0ecd7","sha256:7271f0f8999441419355eea55cd15aac1f355e42705ea098e80fde7b682e24df"],"state_sha256":"4e462a3077a427cf972b791fda8054c01d810edeb619b558a5cbd98b55a1ae79"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GcBGE9Mo4fSc/rhlEgoBo+wdam+wroOyAf2nIm1M8pcJI6qmDx3JcLRwQLkYahPpPLScv2sl2lg5bPbTPTOyAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T17:39:20.068776Z","bundle_sha256":"f56b48fbe790f36abeaf9e3701d9a7b37358805f081c688040964ced2fa041e6"}}